Privacy Policy

This policy explains how ClipFox ("we"), operated from the United Arab Emirates, handles personal data when you use ClipFox. We are the controller of your account data.

1. What we collect

• Account: email, display name, handle, avatar and social links you add, and your sign-in method (email or Google).
• Your content: videos you upload or import by link, the source link you paste, transcripts, clips, edit settings, exports, posts and earnings you log, brand kit.
• Rights records: the source and rights type you choose per project, with date, time, IP address and Terms version.
• Acceptance records: which Terms, Privacy and campaign terms you accepted, the version, time, IP address and browser user agent.
• Usage: export, transcription and AI-call counts, campaign participation and submissions, payout method details you choose to give.
• Payments: plan, amount, currency, status and processor reference. We never see or store card numbers or wallet private keys.
• Technical: IP address (for security, rate limits and records above) and basic logs.
• Copyright notices: the details you send us through the Copyright page.

2. Why we use it, and our legal bases

• To provide the Service (contract): accounts, storing and processing your videos, AI features, exports, campaigns and payouts.
• To keep it safe and lawful (legitimate interests and legal obligation): fraud and abuse prevention, rate limits, copyright handling, proof of acceptance, tax and accounting.
• To improve ClipFox (legitimate interests): aggregate usage and error information.
• Consent where we ask for it — for example the public leaderboard (you can opt out in Settings).

We don't sell your personal data and don't use your videos to train AI models.

3. Who processes it for us

• Lovable Cloud (built on Supabase): hosting, database, storage and sign-in.
• Lovable AI and its model providers (such as Google): transcription and AI features. Audio, transcript text and prompts are sent only to produce your result.
• Payment processors — Whop for cards, Apple Pay and Google Pay, NOWPayments for crypto, and Stripe for cards if we add it later — receive what they need to take a payment.
• YouTube Data API (Google): searching Creative Commons videos and public channel stats. Google's privacy policy applies.
• Google when you choose Google sign-in; file hosts (Drive, Dropbox, OneDrive) when you import a link.

4. Visitor analytics

Our published site uses Lovable's built-in visitor analytics. It uses no cookies, stores nothing on your device, doesn't keep IP addresses and doesn't identify visitors. Lovable collects this data for us. Lovable's privacy policy explains how it handles it.

It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. All of this is recorded for every visitor. Detailed data is kept for 90 days and daily summaries for a year.

5. International transfers

Our providers may process data outside your country, including in the United States and the European Union. Where required, we rely on appropriate safeguards such as standard contractual clauses offered by those providers.

6. How long we keep it

• Projects, videos, transcripts, clips and exports: until you delete them. Use “Delete project” (⋮ menu on the dashboard or project page) to permanently remove a project and its stored files right away.
• Account data: until you use “Delete my account” in Settings (or email us), which permanently deletes your projects, files, brand kit, tracked posts and profile and signs you out. We don't automatically delete files today; if we introduce deletion of inactive files we'll give notice first.
• Payment records, Terms acceptances, the source & rights confirmation of each project (kept even after the project is deleted), campaign payout records and copyright notices: as long as needed for legal, tax and dispute purposes (typically up to 7 years), even after account deletion.
• No-signup demo: drafts stay in your own browser; we keep only a hashed IP counter for daily limits.

7. Your rights

Depending on where you live — including under the UAE Personal Data Protection Law (PDPL), the EU/UK GDPR and California privacy law — you can ask to access, correct, delete or export your data, object to or restrict certain uses, and withdraw consent. Email clipfoxhq@gmail.com from your account email and we'll respond within 30 days. You can also complain to your local data protection authority. We don't discriminate against you for using these rights.

8. Cookies and local storage

We use only essential browser storage: your sign-in session, demo drafts, referral code and similar settings needed for the app to work. No advertising cookies or trackers.

9. Children

ClipFox is not for children under 13 (or the higher minimum age for digital consent in your country). If we learn a child's account exists, we delete it.

10. Security

We use access controls, encryption in transit and per-user data isolation. No system is perfectly secure, so please use a strong password.

11. Changes

We'll post updates here with a new date and version, and ask you to accept material changes in the app.

12. Contact

ClipFox, United Arab Emirates — clipfoxhq@gmail.com.